Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mJ4Khn2Yo0Mcgxf62K2WriGQqRk.roa
File: mJ4Khn2Yo0Mcgxf62K2WriGQqRk.roa (raw, json)
Hash identifier: A32DSl3Xr5GsEPAJAJD+6QXfy51+llkeNTegG0snyM0=
Subject key identifier: 98:9E:0A:86:7D:98:A3:43:1C:83:17:FA:D8:AD:96:AE:21:90:A9:19
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01883C14530E6C689D98807F5B31C5124824
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mJ4Khn2Yo0Mcgxf62K2WriGQqRk.roa
Signing time: Sun 21 May 2023 02:12:24 +0000
ROA not before: Sun 21 May 2023 02:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 81.161.231.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
164.40.185.0/24 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 May 2023 04:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3c:14:53:0e:6c:68:9d:98:80:7f:5b:31:c5:12:48:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 21 02:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=989e0a867d98a3431c8317fad8ad96ae2190a919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:41:50:e3:e7:e7:df:a5:dc:cc:17:a6:9d:
ac:6e:14:7d:4b:28:fa:ef:ec:e6:8d:f3:11:f5:77:
a4:8a:aa:68:03:5a:08:b2:c5:0c:64:da:41:3e:2c:
53:38:98:e3:72:88:a2:f3:5f:7c:b5:81:fc:47:4b:
18:d2:a7:73:fc:3b:60:38:55:82:6b:04:fd:e5:11:
46:05:19:ee:62:de:c8:b0:21:0f:e2:ab:79:de:21:
d2:4b:0a:cb:a5:c6:fb:94:b7:0b:2f:08:a1:ca:b3:
6d:b2:8d:83:58:42:dd:b5:98:9a:58:35:0f:a9:6c:
ed:68:54:89:a8:ce:a4:17:91:bd:b2:00:b1:92:cb:
8e:a0:f9:28:a6:34:03:ce:fb:02:d6:55:82:1b:c9:
c1:5b:1e:e1:97:ac:d9:52:34:ff:80:d7:8c:50:47:
e6:cf:11:84:05:98:76:e0:ed:f4:88:7b:89:0c:7d:
1d:4b:9e:3d:13:e3:49:49:a3:52:c3:e9:a4:eb:e0:
aa:80:4d:7b:61:78:44:d0:c6:38:b7:19:7b:28:99:
7d:11:58:36:7a:33:76:08:9a:3c:c5:f0:1c:98:5f:
37:17:43:19:8e:b1:27:83:35:67:20:41:72:11:30:
75:40:df:13:c4:d6:d7:52:36:f0:fd:56:ac:33:b0:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:0A:86:7D:98:A3:43:1C:83:17:FA:D8:AD:96:AE:21:90:A9:19
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mJ4Khn2Yo0Mcgxf62K2WriGQqRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.231.0/24
94.156.8.0/24
164.40.185.0/24
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:37:b7:52:8b:fe:28:1c:65:ea:ae:f8:a3:d6:f0:0a:0a:cc:
f5:7c:ae:dc:fc:5a:06:fe:1b:4a:bf:79:76:da:6c:e3:92:91:
57:cf:78:6c:3e:2f:0f:5f:d3:f6:99:cd:39:cc:37:66:f2:88:
9b:21:dd:20:b5:e9:f3:12:4f:df:19:fc:cd:a5:ca:b3:2a:65:
7f:e7:90:fe:29:e4:1d:f5:06:95:f9:90:1d:01:fc:b0:b6:99:
9e:ca:f8:dc:c7:cd:76:91:86:40:5a:f1:e3:69:db:38:f9:00:
a3:c7:a4:c5:fd:7a:95:96:de:a6:c9:97:8f:74:cc:4a:ef:23:
a9:ca:f4:29:1e:e2:71:b6:9d:9d:46:02:3e:e0:60:0f:50:a0:
5e:11:62:45:51:88:87:89:27:f6:3e:65:2e:aa:58:91:9c:2d:
c1:b0:56:44:f4:4a:43:c0:58:9e:0e:17:4f:5f:60:60:0f:6b:
cb:d3:86:0d:ed:dd:66:15:01:42:ed:42:ff:a8:bf:9f:70:72:
e4:17:eb:60:92:bf:33:1c:86:a1:2e:1e:6b:f0:66:e2:a3:da:
12:25:e6:94:da:36:63:53:16:26:c4:bc:c6:f0:b6:b3:bf:cd:
4e:86:6c:67:d5:3b:ce:cc:a1:4b:a9:f2:ec:05:49:67:bc:c4:
0a:76:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:18 2024 by rpki-client on console-fra.rpki-client.org